SecurePuter

Exploring Computer Security

Entries for the ‘Incident Response’ Category

Insider Threat - An Example of Mayhem

Insider Threat Defined
Yesterday I defined who hackers could potentially be . Today I want to focus on the most dangerous prospect, an insider threat. Attacks from company employees, whom have direct access to systems inside the outer defenses, are of serious concern. Employees and contractors already have access to the systems, and [...]

Leave a Comment

10 Free Windows Incident Response & Forensic Tools

10 Windows Incident Response & Forensic Tools You shouldn’t be without
A medieval knight cannot go into battle without his armor. In the same manner, an information security officer cannot respond to an attack without his or her forensic tools. Preparing an incident response CD, to house an investigative toolkit, is the preferred method [...]

Leave a Comment

Basic Incident Response Plan

Basic Incident Response Plan
I thought I’d share with everyone a diagram I created when asked to present a general overview of incident response. First, let me define what it is.
Incident response is the act of finding a security breach, minimizing organizational damages, resolving issues, and investigating the event. Regarding computers, this can be [...]

Leave a Comment